Abstract: A secure communications method includes: receiving, by a first network device, a second ephemeral public key of a second network device; determining, by the first network device, an ephemeral session key based on a first shared key, a first ephemeral secret key of the first network device, and the second ephemeral public key, where the first shared key is shared between the first network device and the second network device; and performing, by the first network device, secure communication with the second network device based on the ephemeral session key.

Abstract: The present disclosure provides a financial services platform and method of transferring funds using a financial services platform. The platform may comprise a plurality of rails. The plurality of rails may be based or built on a blockchain. The plurality of rails may be configured to enable a plurality of financial transactions comprising direct deposits, money transfers, debits, financed purchases, and point of sale loans between a plurality of parties. The platform may further comprise an application for implementing the plurality of rails. The application may be executable on a plurality of devices and comprises a graphical interface for facilitating the financial transactions between the plurality of parties. At least one of the financial transactions may be completed by using a visual code that is indicative or representative of a transaction amount or settlement between a first part and a second party.

Abstract: A Certification Authority (CA) server for issuing digital certificates generates a first digital certificate associated with a first public key of the device and calculates an update factor for the first private key. Based on the first public key, the calculated update factor, and a predefined public system parameter, the CA server calculates a second public key for a determined time period for the device. The CA server generates a second digital certificate valid at the determined time period and associated with the second public key and sends the second digital certificate to the device. A device may calculate an update factor for a stored first private key, calculates a second private key based on the calculated update factor and the first private key, receives from the CA server a second digital certificate associated with a second public key, and validates the device based on the second digital certificate.

Abstract: A ribosome extraction method is provided. In the ribosome extraction method, cucumber cubes and a phosphate buffer saline (PBS) solution are mixed and slurried, and an 80S cucumber ribosome is prepared by first centrifugation, second centrifugation, third centrifugation, ultracentrifugation, and fourth centrifugation. The extracted 80S cucumber ribosome is relatively complete and high in yield, and about 2400 OD260 of 80S ribosome can be extracted from 500 g of cucumbers, so that the problems of difficult extraction and low yield of the ribosome are solved, and a foundation is laid for protein structure determination and function analysis.

Abstract: This application provides an authentication credential protection method and system. The protection method includes the following steps: generating authentication secret information based on a lock screen password and hardware secret information of a first device; randomly generating, by the first device, a symmetric key, and using the symmetric key as an encryption key for the authentication secret information; splitting the encryption key into at least two first key segments by using a multi-party data splitting algorithm, where one of the at least two first key segments is stored on the first device; and sending, by the first device, another first key segment to a trusted device. In the foregoing technical solution, the authentication secret information is generated by using the lock screen password and the hardware secret information, increasing information complexity. In addition, different trusted devices are used to store the split key segments, improving security of the encryption key.

Abstract: A method for distributing an equity reward for federated learning based on an equity theory includes the following steps: applying Adams' equity theory to federated learning, analyzing, by a participant, all factors invested in a federated task comprehensively, then giving an expected reward for this task, calculating, by the task publisher, the reputation of the participant; participating, by the participant, in each round of a training task using a local data to evaluate data contribution, model contribution, and a waiting-time allowance of the participant, then combining contribution results of the three factors to evaluate the contribution of the participant; after a global model converges, dynamically adjusting weights of the three factors according to an objective function of the equity reward, with a goal that an actual reward of the participant is as close as possible to the expected reward, and obtaining and distributing the actual reward of the participant.

Abstract: A method for distributing an equity reward for federated learning based on an equity theory includes the following steps: applying Adams' equity theory to federated learning, analyzing, by a participant, all factors invested in a federated task comprehensively, then giving an expected reward for this task, calculating, by the task publisher, the reputation of the participant; participating, by the participant, in each round of a training task using a local data to evaluate data contribution, model contribution, and a waiting-time allowance of the participant, then combining contribution results of the three factors to evaluate the contribution of the participant; after a global model converges, dynamically adjusting weights of the three factors according to an objective function of the equity reward, with a goal that an actual reward of the participant is as close as possible to the expected reward, and obtaining and distributing the actual reward of the participant.

Abstract: A secure communications method includes: receiving, by a first network device, a second ephemeral public key of a second network device; determining, by the first network device, an ephemeral session key based on a first shared key, a first ephemeral secret key of the first network device, and the second ephemeral public key, where the first shared key is shared between the first network device and the second network device; and performing, by the first network device, secure communication with the second network device based on the ephemeral session key.

Abstract: A Certification Authority (CA) server for issuing digital certificates generates a first digital certificate associated with a first public key of the device and calculates an update factor for the first private key. Based on the first public key, the calculated update factor, and a predefined public system parameter, the CA server calculates a second public key for a determined time period for the device. The CA server generates a second digital certificate valid at the determined time period and associated with the second public key and sends the second digital certificate to the device. A device may calculate an update factor for a stored first private key, calculates a second private key based on the calculated update factor and the first private key, receives from the CA server a second digital certificate associated with a second public key, and validates the device based on the second digital certificate.

Abstract: This application provides an authentication credential protection method and system. The protection method includes the following steps: generating authentication secret information based on a lock screen password and hardware secret information of a first device; randomly generating, by the first device, a symmetric key, and using the symmetric key as an encryption key for the authentication secret information; splitting the encryption key into at least two first key segments by using a multi-party data splitting algorithm, where one of the at least two first key segments is stored on the first device; and sending, by the first device, another first key segment to a trusted device. In the foregoing technical solution, the authentication secret information is generated by using the lock screen password and the hardware secret information, increasing information complexity. In addition, different trusted devices are used to store the split key segments, improving security of the encryption key.